Overview
overview
10Static
static
10COMDLG32.dll
windows7-x64
1COMDLG32.dll
windows10-2004-x64
1MSADODC.dll
windows7-x64
1MSADODC.dll
windows10-2004-x64
1MSBIND.dll
windows7-x64
1MSBIND.dll
windows10-2004-x64
1MSCOMCT2.dll
windows7-x64
1MSCOMCT2.dll
windows10-2004-x64
1MSCOMCTL.dll
windows7-x64
1MSCOMCTL.dll
windows10-2004-x64
1MSDATGRD.dll
windows7-x64
1MSDATGRD.dll
windows10-2004-x64
1MSSTDFMT.dll
windows7-x64
1MSSTDFMT.dll
windows10-2004-x64
1MSWINSCK.dll
windows7-x64
1MSWINSCK.dll
windows10-2004-x64
1Readme-说明.htm
windows7-x64
1Readme-说明.htm
windows10-2004-x64
1jmail.dll
windows7-x64
1jmail.dll
windows10-2004-x64
1run.exe
windows7-x64
10run.exe
windows10-2004-x64
10yuren2008.exe
windows7-x64
yuren2008.exe
windows10-2004-x64
1Analysis
-
max time kernel
206s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 16:25
Behavioral task
behavioral1
Sample
COMDLG32.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
COMDLG32.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
MSADODC.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
MSADODC.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
MSBIND.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
MSBIND.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
MSCOMCT2.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
MSCOMCT2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
MSCOMCTL.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
MSCOMCTL.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
MSDATGRD.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
MSDATGRD.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
MSSTDFMT.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
MSSTDFMT.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
MSWINSCK.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
MSWINSCK.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
Readme-说明.htm
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Readme-说明.htm
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
jmail.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
jmail.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
run.exe
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
run.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
yuren2008.exe
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
yuren2008.exe
Resource
win10v2004-20221111-en
General
-
Target
yuren2008.exe
-
Size
352KB
-
MD5
6c633875ebe2924b612b5bb6e9e0316a
-
SHA1
04b4d98a92d3ec21c2ff0f8c1eb80b5fcb52c91a
-
SHA256
a844b97d833b2c883059c07b219f3b8ec043b3f8fd8331a3f6dfc9bc3294cc14
-
SHA512
de1dfbab32a3ab03977907cf4464e2c0af52b160471d165796b35013336924bd2756f1c13a3462b5596b5964819bbcea763b62175f5770387552ccea2191ab9e
-
SSDEEP
6144:C/pFlIeCoohSQlOG4EzCxVZ6SyLiSNVy3ETtxPHkZ5AI9E2FLYi7N7H2CpnzNw1F:UjIeC5kGADyLHNVtT7k9qCk0N7Hnnwoo
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
yuren2008.exepid process 2732 yuren2008.exe 2732 yuren2008.exe